CWE-125

Out-of-bounds Read

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product reads data past the end, or before the beginning, of the intended buffer.

8,471 vulnerabilities with CWE-125
CVE-2026-6364 MEDIUM
Google Chrome < 147.0.7727.101 - Out-of-Bounds Access
CVSS 6.5
CVE-2026-6308 HIGH
Google Chrome < 147.0.7727.101 - Out-of-Bounds Access
CVSS 7.5
CVE-2026-40917 MEDIUM
Gimp: gimp: application crashes or information disclosure via crafted icns image files
CVSS 5.0
CVE-2026-27294 HIGH
Adobe Framemaker | Out-of-bounds Read (CWE-125)
CVSS 7.8
CVE-2026-33019 HIGH
libsixel: Integer overflow leads to Out-of-bounds Read in img2sixel
CVSS 7.1
CVE-2026-27287 HIGH
InCopy | Out-of-bounds Read (CWE-125)
CVSS 7.8
CVE-2026-27289 HIGH
Photoshop Desktop | Out-of-bounds Read (CWE-125)
CVSS 7.8
CVE-2026-33822 MEDIUM
Microsoft Word Information Disclosure Vulnerability
CVSS 6.1
CVE-2026-33096 HIGH
HTTP.sys Denial of Service Vulnerability
CVSS 7.5
CVE-2026-32188 HIGH
Microsoft Excel Information Disclosure Vulnerability
CVSS 7.1
CVE-2026-32076 HIGH
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-27931 MEDIUM
Windows GDI Information Disclosure Vulnerability
CVSS 5.5
CVE-2026-27930 MEDIUM
Windows GDI Information Disclosure Vulnerability
CVSS 5.5
CVE-2026-26156 HIGH
Windows Hyper-V Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-26153 HIGH
Windows Encrypted File System (EFS) Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-27284 HIGH
InDesign Desktop | Out-of-bounds Read (CWE-125)
CVSS 7.8
CVE-2026-5713 MEDIUM
Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target
CVE-2026-39979 MEDIUM
jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers
CVSS 6.5
CVE-2026-39956 MEDIUM
jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure
CVSS 6.1
CVE-2026-33905 MEDIUM
ImageMagick has an Out-of-Bounds read via -sample operation
CVSS 5.5
CVE-2026-32605 HIGH
Nimiq: Remote crash via off-by-one signer bounds check in proposal buffer
CVSS 7.5
CVE-2026-30997 HIGH
FFmpeg 8.0.1 - DoS
CVSS 7.5
CVE-2026-25209 MEDIUM
Samsung Open Source Escargot - Out-of-Bounds Access
CVSS 6.5
CVE-2026-25206 MEDIUM
Samsung Open Source Escargot - Out-of-Bounds Access
CVSS 6.7
CVE-2026-5393 CRITICAL
OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS
CVSS 9.1
Details
Vulnerabilities 8,471
Links
MITRE CWE Entry Search this CWE With Exploits